Sparx Systems Pro Cloud Server
7 CVEs affecting Sparx Systems Pro Cloud Server. Latest disclosed: 2026-05-19. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-42097 | High | 8.8 | 2026-05-19 | Sparx Pro Cloud Server requires authentication based on requested URL. An attacker can omit the "model" query parameter and send the model name only in the bin… |
CVE-2026-42096 | High | 8.8 | 2026-05-19 | Sparx Pro Cloud Server is vulnerable to Broken Access Control within communication with the database. Due to lack of permission checks, any low privileged user… |
CVE-2026-42100 | High | 7.5 | 2026-05-19 | Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows Denial of Service (DoS) attack to be executed by sending an specially cra… |
CVE-2026-42099 | High | 7.5 | 2026-05-19 | Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint. The application downloads the properties of the ob… |
CVE-2025-4377 | | 2025-05-09 | Improper Limitation of a Pathname caused a Path Traversal vulnerability in Sparx Systems Pro Cloud Server. This vulnerability is present in logview.php and it… | |
CVE-2025-4376 | | 2025-05-09 | Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search field allows Cross-Site Scripting (XSS). This issue affects P… | |
CVE-2025-4375 | | 2025-05-09 | Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to perform Session Hijacking. Cross-Site Re… |